MAL-2025-190188 Malicious code in vuepress-apollo-kuiperbelt-hercules (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d4173383d800b1607f50cc0cf3319b90bfd620b0d00175aab6683c57b5f9471 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-186341 Malicious code in cosmicweb-antares-lithosphere-phoenix (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0506cb2e0e182f936ec1b74d381874e93fb15d69cc3a6e7245f53e539eba8e7f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-187969 Malicious code in meissa-gemini-jupiter-heliophysics (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 089faaaac3c0796dcadd5706ba9d72fecc451884fd1cf61f39081991d2cb04c7 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-189592 Malicious code in solis-troposphere-slides-meissa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c03d4a07f458509a749319fab250192b4c3408f165b5865649842156cc6e3e02 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in msokidt-avog-uucav (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d92731012b6a34346fc5ad405c663f2489fd978af459d770f6d3303f64bda6b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in oloc-yg-uhitaggadatusafadi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f32e86f997fa8810cfddb0a642c421dec94fe2ba3d97e6b36c662d553eee7df2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-180044 Malicious code in teate-thy-py-buhip (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4a1bf59eca5cebeae3446f6d4907a8239232d595ab9716af06de4e4c2f672384 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174761 Malicious code in hokage-25 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f1b769261fadd7b74954ba107b36eafc384a7132206180de4c8d51d4ee15d70a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-174037 Malicious code in divata-tuag-ivga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f027a1ae2df06970ca9d330cc74638b0b2eea150a185547b145995b91c266c0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in augis-pomo9r-nsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0b031ce29729e977f1d917ccc00ba82b6008e8dadf09ef891c621e2fa580bb2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-171874 Malicious code in skycrafter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1bb968d9b5e7419b3b76af4c4aedcd0f00ef34998a0fb809ec8cde6bd5b66df2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in teagood-yakuna40 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d5a0699c53fd66ad45d4c9e895b0a025da499c5c945636e912a05fe450a07708 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in buatafa-btraa-nitru (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0dfaa33f3c450ba27bfd5093fd4d032d44d9eb154add412998b78d48f8c44f66 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in mad-vs-munchen (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0934402f5d696e63647def889f526f5bb97b2e7b95ca299100a2007d127cfbe5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in verify-ayisali-gufalanais (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d60b4a4035ebd00b7c58c79e4b49337bbfc24e59a390ad5104d260f5defc6a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-154385 Malicious code in diago-kamoi-liumaoim (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 922c0bac4a15adb596e126fc42a78e8706b13de16b19d13423b2dda36b3a9afb This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-167312 Malicious code in teagood-nakamala47 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 959d182cfc29fe9b023383637fc388b02042bd39b660c596e79dea1fd155010b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in manurung-poke65 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 746fd1eb90d32ba4b85ebc35161cc721d9828710482a14cb4cfbd7653bc8eead This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in piluvaika-kaiuabulibu-nunubai (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 800e87cbdb51eae33c12061df8842e37e72f87416ff5a934ab22bf7896ada36f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-151814 Malicious code in aiboa-mioliupe-augasiatia (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f7686a3ae737cd765bc619795171170547deabb044bf223d66d4bdd01d3b54b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...